Finally: A Supported Method to Inspect HKLM on Intune‑Managed Devices
For as long as I have worked with Windows management, the registry has been the place where the truth hides. Not the pretty truth you see in a portal, the real one, which build...
Tagged: Security
defender
Central Accept Of “Continue To Sign In” Dialog, Now A Supported Way With Intune
Follow up to: Central Accept Of “Continue to Sign In” Dialog Deployed With Intune Back in June 2025 I wrote about the “Continue to sign in” dialog that hit all of us in the EEA,...
T-Bone Map Drives – Fixed the problem with high load on DC
I have received reports from multiple customers that observed a high load on Domain Controllers. So I needed to enhance the scripts to be lighter on the Domain Controllers. I also needed to find...
Modern Drive and Printer Mapping for Cloud-Native Windows with Intune and PowerShell
Moving to Cloud-native Windows devices solves a lot of old problems, but it also removes some of the assumptions that classic IT automations relied on. Traditional logon scripts, Group Policy-driven mappings, and on-premises management...
Cloud Apps support for APPX and MSIX applications (Windows 365 Frontline)
If you tested Windows 365 Cloud Apps early on, you probably had the same reaction I did, the concept is great to stream just the app but then reality hits. A lot of Microsoft’s newer apps...
The Unexpected Enrollment: How Personal Windows Home Devices Slipped into Intune and How You Can Finally Block Them
Introduction For years, IT administrators have relied on Microsoft Intune’s enrollment restrictions to keep personal Windows devices, especially those running Windows Home editions, out of their managed environments. Yet, despite careful configuration, many organizations...
Start working with Security Baseline Mode: Don´t be scared!
When I first heard about Security Baseline Mode, I assumed it was a one‑time setting: flip the switch once and all future recommendations would roll in automatically. Simple, right? But as I started working...
Update Secure Boot Certificate by using Intune Remediation
Blog post has a new update here Update Secure Boot Certificate by using Intune Remediation – Take 2 – Mr T-Bone´s Blog If you manage Windows devices, there’s a “quiet” platform change you really...
Merry Scripting Christmas from Mr T-Bone
Christmas is here again. Last night, a soft layer of snow covered everything, turning the world outside into a bright, white wonderland. The snow sparkles in the morning light, making everything look calm and...
Updated My Script To “Cleanup Entra ID Devices”, Faster and better logging
I discovered that there are some users out there using my script to cleanup Entra ID devices.I have now updated the script completely to use my new functions that are better and quicker and...
